A security model based on the principle of 'never trust, always verify' — no user or device is trusted by default, even inside the network perimeter.
Traditional security assumed anything inside the corporate network was safe. Zero Trust rejects that assumption, requiring continuous verification for every access request regardless of where it originates.